[pyOpenSSL] certificate chain verification

Matthew Rodriguez DSD staff MKRodriguez at lbl.gov
Tue Mar 29 03:44:11 CEST 2005


I would like to add another feature to pyopenssl. It would allow for a 
different certificate chain verification callback. The callback
would give access to the X509_STORE_CTX structure. The current callback 
function globus_verify_callback is ok, but it doesn't do
everything that our project needs. So I would like to add anther 
callback that would pass this data structure up to Python.

That being said, I was wondering what the plans are for the next release 
of pyopenssl. I have submitted a patch that allows session
resumption and now I want to add another feature to pyopenssl, but I 
also need to have these features be in a release in the
near future, the last release was in August.  I would be willing to 
spend time working on the release of pyopenssl, and even
becoming a developer on the project.

I've been pretty happy with the functionality that pyOpenSSL provides, 
and I would like to work on improving this
software.

What are people's thoughts on another release?

Thanks
Matt Rodriguez








More information about the pyopenssl-users mailing list